Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: JLFdbaGEwuAFfVgOywIHkzaCifKuExJr5Xy516z2CGQ=
Subject key identifier: 1F:C1:DD:19:43:DF:E9:91:C2:C5:57:54:72:0E:6D:9D:4E:95:B4:9C
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 01964E90E17E6444B8B43EFA84B7C709F51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 022C
Signing time: Sat 19 Apr 2025 15:00:39 +0000
Manifest this update: Sat 19 Apr 2025 15:00:39 +0000
Manifest next update: Sun 20 Apr 2025 15:00:39 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: TQqN4t+VkGrSSImCB29Sit+zZnlL0yoof8lxRL/6OUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:e1:7e:64:44:b8:b4:3e:fa:84:b7:c7:09:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Apr 19 15:00:39 2025 GMT
Not After : Apr 20 15:00:39 2025 GMT
Subject: CN=1fc1dd1943dfe991c2c55754720e6d9d4e95b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:a5:d3:3e:72:9c:4e:9b:a1:59:7f:4d:90:
ce:20:13:a1:e3:10:87:63:8a:6f:17:20:ec:9c:c3:
b6:9c:f9:2e:63:db:97:83:49:64:5d:0e:e7:db:4a:
eb:98:c2:0a:73:37:64:d5:29:e5:04:cb:b6:9d:ae:
1b:39:f9:38:8f:16:7f:8a:be:27:9e:74:9f:ed:e5:
c2:4c:a7:a0:45:03:44:b0:5d:18:fc:4b:cb:9e:ca:
27:ef:6b:7b:39:64:45:4d:25:9c:8a:82:3e:43:6b:
c6:63:02:ef:12:7b:f3:71:96:12:f1:e6:a6:db:fe:
96:25:bc:a9:2f:d0:b0:1e:c8:b0:e3:f8:a6:e3:2b:
bf:ba:4f:f4:9d:5f:bd:f8:36:0f:af:d2:3f:48:97:
41:ea:b8:31:39:5e:7a:c0:6d:19:ec:e9:e4:81:6a:
53:24:10:5f:71:94:fe:93:60:ed:be:cd:83:e0:b1:
b8:d6:9a:b9:a3:be:50:45:6c:bc:d1:7e:9b:ba:b2:
ca:11:2c:7d:b1:d5:5c:ab:43:ef:64:ae:51:d0:76:
eb:82:bb:4d:3c:47:74:32:6a:f4:9f:e6:d9:25:56:
93:b0:f9:b5:71:8d:3e:94:57:96:b6:52:d8:9c:4d:
79:06:b5:9c:6f:49:6e:14:e0:c4:72:81:68:81:e4:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C1:DD:19:43:DF:E9:91:C2:C5:57:54:72:0E:6D:9D:4E:95:B4:9C
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:20:a7:ea:70:40:01:08:fa:1b:30:b1:d2:3b:a5:3b:40:
48:31:72:fb:e9:ed:a9:4c:ac:fe:26:a0:d6:e3:e9:93:7c:2f:
c4:8e:9a:14:3b:2b:ba:db:3e:2d:93:05:0d:ab:69:3b:65:06:
ce:48:cf:09:a6:83:5c:eb:c4:e1:bc:99:21:12:5d:b7:10:2e:
60:80:eb:14:0a:ee:f0:19:8e:f1:1f:e9:7d:58:8e:0b:b6:b5:
c9:89:ac:d0:3d:ff:68:35:ac:70:62:af:01:31:a0:ad:0b:f1:
b7:c6:fe:47:9f:44:ce:45:69:56:22:5e:af:cc:56:bd:53:2b:
a3:d6:29:9f:6f:65:c9:6b:65:d3:2e:ad:a0:aa:2f:ed:a4:d4:
c0:06:0d:32:1e:b3:61:20:70:10:c5:92:dd:64:29:eb:d5:22:
bd:fe:cf:7f:a3:8f:54:e8:a7:f9:1c:64:87:0e:c6:25:c4:ff:
85:46:f5:19:aa:7e:c8:07:cc:ca:5b:b3:56:5c:20:be:2e:cd:
c2:07:be:36:a0:9f:b1:ec:0e:bb:6c:15:ce:d3:57:2d:00:31:
06:06:8e:1d:85:e9:aa:b9:3c:33:7b:9f:41:91:a2:4f:3c:cf:
60:99:fe:65:20:b9:82:0b:0d:19:b2:e1:38:a2:05:0c:c1:40:
43:0d:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:04 2025 by rpki-client